Privacy Policy

• Businesses that use Smpl AI, and the people on their teams (“customers”, “you”).
• People who message a business that uses Smpl AI (“end users”).
• Visitors to smplai.co.

When we handle end users’ messages, we do so on behalf of the business they are messaging, which decides how its agent is set up. That business is responsible for its own privacy notice to its customers; we act as its service provider and follow its instructions and this policy.

• Account information: your name, email address, phone number and company, the details of your team members, and sign-in information.
• Billing information: your plan, payments and invoices. Payment details are handled by our payment provider (PayPal); we don’t store full card numbers.
• Connected accounts: when you connect a Facebook Page, an Instagram professional account, a WhatsApp number or another tool (such as Shopify, Slack or Gmail), we receive the account’s identifiers and name, the permissions you grant, and access tokens, which we store encrypted.
• Conversations: the messages end users send to your agent, and the replies from your agent and your team, with their times; files they send (images, voice notes, documents) and transcripts of voice notes; and the details the channel gives us about the sender, such as their name, username, phone number (WhatsApp) or the ID Meta assigns them for your Page or account.
• Content you add: your agents’ instructions and settings, and the documents and websites you add to their knowledge.
• Usage and technical data: records of how the service is used, device and browser information, IP addresses and error reports, which we use to run and secure the service. Our website uses Vercel Web Analytics, which counts visits without cookies.
• Our own website chat: messages you send to the assistant on smplai.co are handled like any agent conversation.

• To provide the service: run your agents, reply to end users on the channels you connect, show conversations in your dashboard, hand conversations to your team, and carry out the actions you set up (for example, looking up an order in your store).
• To manage your account and bill you.
• To keep the service secure and working: prevent abuse and fraud, monitor errors and performance, and fix problems.
• To support you and tell you about the service, including changes to it or to our terms.
• To meet our legal obligations.

We do not sell personal data, we do not use it for advertising, and we do not use your or your end users’ conversations to train AI models.

When a business connects a Facebook Page, an Instagram professional account or a WhatsApp number, we receive the messages people send to it, the business’s replies, and basic profile information about the sender (such as their name and username), through Meta’s APIs and only with the permissions the business grants.

We use this data only to provide the messaging service to that business: to answer, route and display its conversations. We don’t use it for any other business, for advertising or to build profiles, we don’t sell it, and we share it only with the service providers listed below that help us provide the service.

A business can disconnect its account at any time from its Smpl AI dashboard, or by removing Smpl AI from its Facebook or Instagram settings; we then stop receiving its messages. To have data deleted, see our Data Deletion page.

To write a reply, we send the conversation, the agent’s instructions and relevant knowledge to the AI model provider the business has chosen for its agent. The provider processes them to generate the reply, under its terms for business use of its services.

AI replies can be wrong. Businesses set up their agents, can see every conversation and can take over from the AI at any time.

Service providers that host and run the service for us, which may use the data only to provide their service to us:

• Hosting, database and file storage: Vercel, Supabase.
• AI models, embeddings and voice transcription: OpenAI, Anthropic and Google, and — when a business chooses their models — xAI, DeepSeek, Moonshot AI, Alibaba Cloud (Qwen), Zhipu AI (GLM) and MiniMax.
• Messaging channels: Meta (WhatsApp, Messenger and Instagram) and Twilio (WhatsApp).
• Agent features: Zep (customer memory, when enabled), E2B (code execution for advanced agents), LangSmith (monitoring of agent runs), and, when an agent uses them, Tavily (web search), Firecrawl (website crawling), LlamaIndex (document reading) and Cohere (search ranking).
• Email: Resend. Error monitoring: Sentry. Payments: PayPal.

Tools you connect: when you connect a tool such as Shopify, Slack, Gmail, Google Sheets, HubSpot, Notion or Zendesk, we exchange data with it as your agent’s setup requires.

We may also disclose data when the law requires it, or to a successor if Smpl AI is merged or acquired, who will remain bound by this policy.

Our database and file storage are hosted in the European Union. Our service providers may process data in other countries, including the United States and, for some AI models a business may choose, China. Where the law, including Egypt’s Personal Data Protection Law (Law No. 151 of 2020), sets conditions for transferring personal data outside Egypt, we take the steps it requires.

• Account information: while your account is open, and after it’s closed only as long as needed to settle billing and meet legal obligations.
• Billing records: as long as tax and accounting laws require.
• Conversations and end users’ details: while the business’s account is open. We delete them within 30 days after the account is closed, or after a verified request to delete them.
• Files end users send (images, voice notes, documents) and files your team attaches to replies: 30 days after they’re received, then deleted automatically.
• Access tokens for connected accounts: until the account is disconnected, or the business removes Smpl AI from it.
• Backups, logs and monitoring records: kept for limited periods and deleted on their normal cycle, generally within 90 days.

We encrypt data in transit, encrypt access tokens at rest, limit access to the people who need it, and verify the signatures on messages channels send us. No system is perfectly secure; if a breach affects your personal data, we will tell you as the law requires.

Under Egypt’s Personal Data Protection Law and other laws that may apply to you, you can ask to know what personal data we hold about you, get a copy, have it corrected or deleted, restrict or object to its processing, and withdraw any consent you’ve given. Email info@smplai.co; we may need to verify your identity, and we will reply within 30 days.

If you messaged a business that uses Smpl AI, please contact that business first: it decides how its agent uses your data. You can also contact us, and we will pass your request on and help.

You can also complain to Egypt’s Personal Data Protection Center.

Smpl AI is a service for businesses. It isn’t directed at children, and accounts are for people aged 18 or over.

We will post any changes here and update the date above. For significant changes, we will also tell account owners by email or in the dashboard.

Smpl for Artificial Intelligence LLC, 45 Street 9, Thakanat El Maadi, Maadi, Cairo, Egypt. Email: info@smplai.co.